[Webkit-unassigned] [Bug 223545] New: Crash in ReplaceSelectionCommand::doApply()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=223545

            Bug ID: 223545
           Summary: Crash in ReplaceSelectionCommand::doApply()
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: HTML Editing
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: julian_a_gonzalez at apple.com
                CC: rniwa at webkit.org, wenson_hsieh at apple.com

e.g.

frame #0: WebCore`WebCore::CompositeEditCommand::splitTreeToNode(WebCore::Node&, WebCore::Node&, bool)
frame #1: WebCore`WebCore::ReplaceSelectionCommand::doApply()
frame #2: WebCore`WebCore::CompositeEditCommand::apply()
frame #3: WebCore`WebCore::executeInsertFragment(WebCore::Frame&, WTF::Ref<WebCore::DocumentFragment, WTF::RawPtrTraits<WebCore::DocumentFragment> >&&)
frame #4: WebCore`WebCore::executeInsertNode(WebCore::Frame&, WTF::Ref<WebCore::Node, WTF::RawPtrTraits<WebCore::Node> >&&)
frame #5: WebCore`WebCore::executeInsertImage(WebCore::Frame&, WebCore::Event*, WebCore::EditorCommandSource, WTF::String const&)
frame #6: WebCore`WebCore::Document::execCommand(WTF::String const&, bool, WTF::String const&)

<rdar://problem/73938060>

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210320/710fcd1b/attachment.htm>